Malware, Virus, Ransomware: Is it safe to keep a Beosound 5 / BM5 connected to the internet?

Reply

TWG Posted: Sun, Jul 5 2020 11:04 AM

rated by 0 users

Hi,

maybe a dumb question, but seeing how much malware, virus, ransomware etc. is around on the internet I wonder if it is still safe to keep a Beomaster 5 connected to the internet for listening to internetradio?

Reply

TWG replied on Mon, Jul 6 2020 8:24 AM

rated by 0 users

mbolo01:

I don’t think that B&O products’ operating system are interesting targets for such attacks.

In general I agree with you, but the Beomaster 5 runs on Windows XP embedded. That's why I'm asking. ;)

Reply

mbolo01 replied on Mon, Jul 6 2020 9:56 AM

rated by 0 users

TWG:

In general I agree with you, but the Beomaster 5 runs on Windows XP embedded. That's why I'm asking. ;)

Oh ... sorry, I didn't know, I should have checked before answering.

Then I would say almost the same, XP is maybe not what hackers are focusing on these days. On top of that, I guess the BM 5 uses a locked down version of XP, i.e. that you don't use the BM 5 like a regular computer to browse or use internet services, which drastically reduces the risk of direct attacks. I would say that the risk could come from another device on your local network, via SMB for example, and not from an internet radio stream. If your other network devices are well protected, then keeping this XP type of machine on your local network may not be a the highest risk these days. You can always add more protection such physical firewall or other dedicated security tools, but does it really worth it ? And if you no longer use it, then turning it off is always the good choice.

Reply

northswede replied on Mon, Jul 6 2020 9:57 AM

rated by 0 users

It's true that BM5/BS5 is running an old operating system with known exploits.

But I think you will be safe as long as you don't use the integrated browser to actually browse the web and don't  connect the device directly to the internet.
The SMB 1.0 protocol (used to transfer data to/from the BM5) has exploits used by various malware, but as long as you download content from trusted sources shouldn't it be any problem.

But your question is valid since software support for discontinued products will be more and more important to adress for the vendors.
Or for the customer to take in consideration while accepting a products lifecycle.